CryptoMedium•9 November 2026•
1 min read
Ethersphere Software Hijacked to Distribute Malware Targeting Crypto Wallet Keys
Key Facts
1Ethersphere’s bee-js and Swarm Desktop packages were hijacked to distribute malware designed to steal private keys.
2The compromised bee-js package remained on npm for 75 minutes, while the malicious Swarm Desktop release was online for nearly 8.5 hours.
Ethersphere’s bee-js and Swarm Desktop software packages were hijacked to distribute malware designed to steal private keys. Cryptonews.net reported that hackers compromised GitHub accounts and CI credentials to inject malicious code into official software releases, specifically targeting Bee node wallet private keys.
The compromised bee-js package remained on the npm platform for 75 minutes, while the malicious Swarm Desktop release was online for nearly 8.5 hours. The breach represents a significant security compromise of infrastructure software distributed through authentic channels.